topic Re: Last stable version OVA - Meraki switches ISE in Network Access Control

Last stable version OVA - Meraki switches ISE

athan1234 — Fri, 03 Nov 2023 10:35:11 GMT

Hi there

My client wishes to implemnt Cisco ISe As far as I can tell, the most recent stable version is 3.2. it is correct?

I must give him the OVA to implement on their virtual machine. I have a huge mess and I see that there are a lot of OVAS. which OVA should I give my customer to deploy in his virtual machine?

I therefore have one final query. I implemnted ISe about Cisco 37xxx or odthe models This client want to use the Cisco Meraki MS225, for instance. Is it compatible? is there any information available about it?

I have an early peak at this Thoms article, .

https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-p/3618650#toc-hId-55516780

Re: Last stable version OVA - Meraki switches ISE

Karsten Iwen — Fri, 03 Nov 2023 10:38:23 GMT

You need to use the OVA that matches your needed deployment size. I would suspect "small" is what you need.

For the switch: Compatible for what? Meraki Switches are not as feature-rich as Catalyst. It all depends on what is configured at the moment. If you have more information, it will be easier to help.

Re: Last stable version OVA - Meraki switches ISE

athan1234 — Fri, 03 Nov 2023 11:09:09 GMT

Hi @Karsten Iwen yes I guest it enouhgt with small deployment so for it what is the proper ova for it ?

I am seeing there are small or medium disk for 300 gb , for 600gb or 1200 gb

Regarding switches:

It is a new deployment my customer has meraki envoirement and he want to use tje meraki switches the major are MS225 . I guess the meraki switches dosent have all funvionality for radius attributes , but i dont know about the compatybilyty with ise

Re: Last stable version OVA - Meraki switches ISE

Karsten Iwen — Fri, 03 Nov 2023 11:13:09 GMT

The disk size controls how many logs can be stored. As fast storage is often expensive in smaller environments, I typically go with 300. Meraki switches can interact with ISE for 802.1X, which differs from Catalyst, but I don't miss any features for typical deployments.

Re: Last stable version OVA - Meraki switches ISE

ahollifield — Fri, 03 Nov 2023 12:02:34 GMT

https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html

Re: Last stable version OVA - Meraki switches ISE

ajc — Fri, 03 Nov 2023 13:03:23 GMT

It depends what you want to do, if you are running 3 personas on that ISE VM then you need a good chunk of resources (CPU, Memory and Disk) no matter the size of the deployment. You need to clarify what type of deployment you are looking for. For an smaller deployment 300 GB for PSN is more than enough BUT for primary PAN and Primary MNT I would not go with less than 600 gb or even 1200 GB depending on how much data retention you want to have.

Re: Last stable version OVA - Meraki switches ISE

thomas — Fri, 03 Nov 2023 22:46:33 GMT

@athan1234 , I updated the doc to include the latest Capability Matrix from my 2023 Cisco Live, Las Vegas session ISE Your Meraki Network with Group Based Adaptive Policy – BRKSEC-2100. Anything that does RADIUS is supported, including the MS225.

Re: Last stable version OVA - Meraki switches ISE

athan1234 — Tue, 07 Nov 2023 08:51:39 GMT

Hello @thomas I have a question about radius attributes with Meraki MS SWitches. If my understanding is correct, I only may utilize DHCP attributes to configure a profile on Meraki switches, right?

Re: Last stable version OVA - Meraki switches ISE

ahollifield — Tue, 07 Nov 2023 11:34:11 GMT

No, MS390 supports device sensor. You can also use SNMP polling with Meraki switches.

Re: Last stable version OVA - Meraki switches ISE

thomas — Tue, 07 Nov 2023 13:44:41 GMT

Currently you may only use profiling attributes from the Meraki network devices that provide it. From the Profiling column in the table I added in , you can see which protocols are currently provided by Meraki for Profiling from the respective network devices. As @ahollifield said, only the MS390 currently provides that (-'s mean no support currently).

Re: Last stable version OVA - Meraki switches ISE

athan1234 — Fri, 10 Nov 2023 12:13:30 GMT

Oh, I'm very grateful to @thomas for this documentation 🙂

Re: Last stable version OVA - Meraki switches ISE

athan1234 — Mon, 20 Nov 2023 16:14:48 GMT

The last think i would like to have a stimation the time it would be necesry for set up this number switches 8021x Total: 67 meraki switches ,
5 dell .
For reume the idea would be create a guest portal self sef registration , profailing . user corporative eaptls user not corporative mschav 2 I have to give a stimation time for do those tasks how many stimate toime it is necesary to do this for stasrted.